Any time an application running inside a sandbox invokes an NSOpenPanel or NSSavePanel dialog, rather than showing the panels directly, AppKit automatically asks the Powerbox to present the dialog. From a developer perspective, there are no code changes required in terms of how these panels are used; this process is fully transparent.

After the user selects a set of files or directories, the Powerbox uses new functionality in the sandbox kernel module to expand the invoking application's sandbox to allow access to the selected files. By the time the application code queries the panel for the returned URLs or filenames, it already has permission to access those files, and can continue to use the files through almost any API it already uses.

Why does your validateURL: method need access to the file system? The URL of the file in question is passed to the delegate method, what else do you need?
– Rob KenigerJul 27 '11 at 12:55

1

I would like to analyze, for example, if the specified URL is writable, and, if not, return NO.
– DevJul 27 '11 at 13:05

Anyway, you can confirm to me that the NSOpenSavePanelDelegate's methods do not have the access to the filesystem? Only the completion handler can access to the selected file? (The official documentation is lacking, in my opinion.)
– DevJul 27 '11 at 13:07

2

I can confirm that you don't have access to the file system in the panel:validateURL:error: delegate method. You should log a bug with Apple if you want this changed.
– Rob KenigerJul 27 '11 at 14:21

ah, I see. The last time I used that their response was so useless that I never used that after that. THANKS! By the way, do you know if there is any way to use [NSSavePanel savePanel] on sandboxed apps with storyboard? There is no way to make it work.
– SpaceDogJan 19 '15 at 17:15

@Dev Did you get any useful reply to your TSI? We -- and I assume others -- have the same problem.
– SebastianJan 3 '18 at 13:36

@Dev Could you share what the TSI outcome was? That would be awesome!
– TobiJan 5 '18 at 16:14

Oh, it was 7 years ago, unfortunately I have nothing more at my fingertips :)
– DevJan 7 '18 at 9:55